The Luxembourg Red Cross attaches great importance to the protection of your personal data. We have set up a procedure to comply with the principles and regulations on the protection of whistle-blowers. If you are required to provide us with personal data, this notice informs you of the use that will be made of it and of the rights you have.
We process your data in order to manage the reporting of a violation. The data you provide also enables us to contact you when necessary.
This data processing is carried out on the basis of the law of 16 May 2023 on the protection of persons who report violations of European Union law.
In accordance with the law, only the data required to manage the reporting of a violation is processed. This data is generally the data you provided to us when you made your report (your surname, first name, address, telephone number or e-mail address, details of the complaint, including data on third parties). Other data may be generated or collected in the course of processing your complaint.
Your data is kept for as long as is necessary to achieve the purposes for which it was collected, and for a maximum of 10 years from the date on which the alert is closed.
Your personal data will only be communicated to the Whistleblowing Officers, their assistants, the investigators mandated to carry out the enquiry, and the competent authorities. Your data will be treated confidentially and will only be shared with third parties with your express consent or where required by law. We ensure that your data is stored and processed in the European Union.
In accordance with the law, you have the following rights:
– The right to information. We hope this notice has answered your questions. For any further information, you can nevertheless contact our data protection officer.
– The right to access your data. In addition to the access to your personnel file provided for in Article L. 414-7 of the Labour Code, which will be granted to you by the Human Resources department, you can access your data by contacting the data protection officer.
– You have the right to rectify your data if it is erroneous or obsolete.
– The right to lodge a complaint with the “Commission nationale pour la protection des données” (CNPD) if you consider that the processing of your data does not comply with the law.
In certain cases and according to the law, you also have the following rights:
– The right to request the deletion of your data.
– The right to request the limitation of the processing of your data.
– The right to object to the processing of your data for any other legitimate reason (unless the Luxembourg Red Cross has a legitimate and compelling reason to continue the processing).
– The right to the portability of the data you have provided to the Luxembourg Red Cross (i.e. the right to receive your personal data on a machine-readable medium), insofar as this is technically possible.
If you have any questions or wish to exercise your rights, you can contact the Luxembourg Red Cross Data Protection Officer by e-mail: rgpd@croix-rouge.lu or by post:
LUXEMBOURG RED CROSS
Data protection
44, boulevard Joseph II
BP 404 L-2014 Luxembourg
In order to comply as fully as possible with current regulations, we undertake to update this information notice whenever necessary.